DNSSEC Debugger - SECURITYTESTFAN.GOV

Domain Name:

Time: 2025-12-13 08:08:38 UTC

Analyzing DNSSEC problems for SECURITYTESTFAN.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1139 octets ;; HEADER SECTION ;; id = 32138 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251231000000 20251210000000 20326 . GtG815YBui59E5sObprF3pDkJhEZQhPIgRdJAGItKoXToXmek0SDpBkg7wsmoM/WWeDNWaYecNTO tz3HTi5ncNHH/vPwBSySDS2AlGCcXDH5gdoh1bIjU98OoT2QfdeujlTr8UqJ60woWwC3HUb2oyeT YSYAargeWYJ4KvNh1vkhcyg9ygR12ohkCC5XhAWucdmuVwnE5Y9qABCStI27yYppoGv36UHakdqW rhdUStla6r0C4f4BudLZX/EkFRlUUhxkwa+XtLfYO2QQxCfuot0Msne9FVEe4HNkFutJw4mGNgQZ yESjt9Q8bGbzCngJgV89HzM02ChJAVofG2ltew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251231000000 20251210000000 20326 . GtG815YBui59E5sObprF3pDkJhEZQhPIgRdJAGItKoXToXmek0SDpBkg7wsmoM/WWeDNWaYecNTO tz3HTi5ncNHH/vPwBSySDS2AlGCcXDH5gdoh1bIjU98OoT2QfdeujlTr8UqJ60woWwC3HUb2oyeT YSYAargeWYJ4KvNh1vkhcyg9ygR12ohkCC5XhAWucdmuVwnE5Y9qABCStI27yYppoGv36UHakdqW rhdUStla6r0C4f4BudLZX/EkFRlUUhxkwa+XtLfYO2QQxCfuot0Msne9FVEe4HNkFutJw4mGNgQZ yESjt9Q8bGbzCngJgV89HzM02ChJAVofG2ltew== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to i.root-servers.net for SECURITYTESTFAN.GOV/A
	Received 632 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 632 octets ;; HEADER SECTION ;; id = 48795 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251226050000 20251213040000 61809 . QeZKgB6D0HZJfBx+ISJaxLn0ji58nrYmrCz3jfYUmxPKMg6FkTHRsc3jR19m1WZRpSt+liovVxNR fr9HMZzizsr6wht8obxO832OVB1YkkYqK5HLly+GphC0rltbkWUH2Dv5MHJdfwmvg/O+zVrQrI7q yA4pKNlg/f701hP/xu+85QR9K0ddzb+0uQvQY+TKzsL4mk6TVwxX/WfVuSIisNxcUBDhiOCvVOJ1 Z8dpwJ63mHf3S1381bhXBJHmSDCPNB4qcvF20eKzA05t830XlET9LoNAe638Bbi1B1ysJEpcYivN i0LaiEb+34g+LythevIvwaH8QD/nmrMrA03tiQ== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for GOV/DNSKEY
	Received 610 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 610 octets ;; HEADER SECTION ;; id = 34433 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.ns.GOV. GOV. 172800 IN NS b.ns.GOV. GOV. 172800 IN NS c.ns.GOV. GOV. 172800 IN NS d.ns.GOV. GOV. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20251226050000 20251213040000 61809 . QeZKgB6D0HZJfBx+ISJaxLn0ji58nrYmrCz3jfYUmxPKMg6FkTHRsc3jR19m1WZRpSt+liovVxNR fr9HMZzizsr6wht8obxO832OVB1YkkYqK5HLly+GphC0rltbkWUH2Dv5MHJdfwmvg/O+zVrQrI7q yA4pKNlg/f701hP/xu+85QR9K0ddzb+0uQvQY+TKzsL4mk6TVwxX/WfVuSIisNxcUBDhiOCvVOJ1 Z8dpwJ63mHf3S1381bhXBJHmSDCPNB4qcvF20eKzA05t830XlET9LoNAe638Bbi1B1ysJEpcYivN i0LaiEb+34g+LythevIvwaH8QD/nmrMrA03tiQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.GOV. 172800 IN A 199.33.230.1 b.ns.GOV. 172800 IN A 199.33.231.1 c.ns.GOV. 172800 IN A 199.33.232.1 d.ns.GOV. 172800 IN A 199.33.233.1 a.ns.GOV. 172800 IN AAAA 2001:503:ff40::1 b.ns.GOV. 172800 IN AAAA 2001:503:ff41::1 c.ns.GOV. 172800 IN AAAA 2001:503:ff42::1 d.ns.GOV. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to c.root-servers.net for GOV/DS
	Received 370 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 370 octets ;; HEADER SECTION ;; id = 19056 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20251226050000 20251213040000 61809 . QeZKgB6D0HZJfBx+ISJaxLn0ji58nrYmrCz3jfYUmxPKMg6FkTHRsc3jR19m1WZRpSt+liovVxNR fr9HMZzizsr6wht8obxO832OVB1YkkYqK5HLly+GphC0rltbkWUH2Dv5MHJdfwmvg/O+zVrQrI7q yA4pKNlg/f701hP/xu+85QR9K0ddzb+0uQvQY+TKzsL4mk6TVwxX/WfVuSIisNxcUBDhiOCvVOJ1 Z8dpwJ63mHf3S1381bhXBJHmSDCPNB4qcvF20eKzA05t830XlET9LoNAe638Bbi1B1ysJEpcYivN i0LaiEb+34g+LythevIvwaH8QD/nmrMrA03tiQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for GOV in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20251226050000 20251213040000 61809 . QeZKgB6D0HZJfBx+ISJaxLn0ji58nrYmrCz3jfYUmxPKMg6FkTHRsc3jR19m1WZRpSt+liovVxNR fr9HMZzizsr6wht8obxO832OVB1YkkYqK5HLly+GphC0rltbkWUH2Dv5MHJdfwmvg/O+zVrQrI7q yA4pKNlg/f701hP/xu+85QR9K0ddzb+0uQvQY+TKzsL4mk6TVwxX/WfVuSIisNxcUBDhiOCvVOJ1 Z8dpwJ63mHf3S1381bhXBJHmSDCPNB4qcvF20eKzA05t830XlET9LoNAe638Bbi1B1ysJEpcYivN i0LaiEb+34g+LythevIvwaH8QD/nmrMrA03tiQ== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.GOV for GOV/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 929 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260205110617 20251206110617 2536 gov. nZHIPZZ3z80AAkg8IDRVDprfpie4C0q93y05w0bzGd/fdwD8ocNWH6iMFuJ1B13pIaERw0TJTBOo cbM9gLWhNQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for GOV
	`GOV. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`GOV. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260205110617 20251206110617 2536 gov. nZHIPZZ3z80AAkg8IDRVDprfpie4C0q93y05w0bzGd/fdwD8ocNWH6iMFuJ1B13pIaERw0TJTBOo cbM9gLWhNQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.GOV for SECURITYTESTFAN.GOV/A
	Received 421 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 421 octets ;; HEADER SECTION ;; id = 55372 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) SECURITYTESTFAN.GOV. 10800 IN NS a1-63.akam.net. SECURITYTESTFAN.GOV. 10800 IN NS a14-64.akam.net. SECURITYTESTFAN.GOV. 10800 IN NS a26-65.akam.net. SECURITYTESTFAN.GOV. 10800 IN NS a3-66.akam.net. SECURITYTESTFAN.GOV. 10800 IN NS a8-67.akam.net. SECURITYTESTFAN.GOV. 10800 IN NS a9-64.akam.net. SECURITYTESTFAN.GOV. 3600 IN DS ( 47449 8 2 de18d15fb9797eba80c71d519f94fd929f979c097f8c66f391b7dc73ff5562d8 ) SECURITYTESTFAN.GOV. 3600 IN DS ( 53590 8 2 edc4e3cc56431f51702c67dc329913eb37a05aea4b234dd8815519cf480f75e6 ) SECURITYTESTFAN.GOV. 3600 IN DS ( 56632 8 2 eccdd4fa79f37872b6856d097de389d20e21ab98969866a7073b917ef48833fe ) SECURITYTESTFAN.GOV. 3600 IN RRSIG ( DS 13 2 3600 20251214090839 20251212070839 35496 gov. tHUfZofuISvCOa3e9tJ4qbFdpUM7ZQ00Dbv6QFzkWIv7blwAEroO0nS7h0QOsPwNDes4kFnKqA3p bmf4Ganhlw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.ns.GOV for SECURITYTESTFAN.GOV/DNSKEY
	Received 421 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 421 octets ;; HEADER SECTION ;; id = 36092 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) SECURITYTESTFAN.GOV. 10800 IN NS a1-63.akam.net. SECURITYTESTFAN.GOV. 10800 IN NS a14-64.akam.net. SECURITYTESTFAN.GOV. 10800 IN NS a26-65.akam.net. SECURITYTESTFAN.GOV. 10800 IN NS a3-66.akam.net. SECURITYTESTFAN.GOV. 10800 IN NS a8-67.akam.net. SECURITYTESTFAN.GOV. 10800 IN NS a9-64.akam.net. SECURITYTESTFAN.GOV. 3600 IN DS ( 47449 8 2 de18d15fb9797eba80c71d519f94fd929f979c097f8c66f391b7dc73ff5562d8 ) SECURITYTESTFAN.GOV. 3600 IN DS ( 53590 8 2 edc4e3cc56431f51702c67dc329913eb37a05aea4b234dd8815519cf480f75e6 ) SECURITYTESTFAN.GOV. 3600 IN DS ( 56632 8 2 eccdd4fa79f37872b6856d097de389d20e21ab98969866a7073b917ef48833fe ) SECURITYTESTFAN.GOV. 3600 IN RRSIG ( DS 13 2 3600 20251214090839 20251212070839 35496 gov. /lV652KSducOs3ENUhooqmXzsY1X3WwvNBQ/vDdSJpzBaPt+HiRNArIcKHLBN6GKccQv/TTJw3Hq lYQXBJwuEA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone SECURITYTESTFAN.GOV

SECURITYTESTFAN.GOV

	Checking DS between GOV and SECURITYTESTFAN.GOV
	Query to c.ns.GOV for SECURITYTESTFAN.GOV/DS
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 22992 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN DS ;; ANSWER SECTION (4 records) SECURITYTESTFAN.GOV. 3600 IN DS ( 47449 8 2 de18d15fb9797eba80c71d519f94fd929f979c097f8c66f391b7dc73ff5562d8 ) SECURITYTESTFAN.GOV. 3600 IN DS ( 53590 8 2 edc4e3cc56431f51702c67dc329913eb37a05aea4b234dd8815519cf480f75e6 ) SECURITYTESTFAN.GOV. 3600 IN DS ( 56632 8 2 eccdd4fa79f37872b6856d097de389d20e21ab98969866a7073b917ef48833fe ) SECURITYTESTFAN.GOV. 3600 IN RRSIG ( DS 13 2 3600 20251214090839 20251212070839 35496 gov. eaSeTk6X3CBQSOPvx2epxWmrGJKe/hiQO2u7s9ZHkou+dCf1pnIQW/08c54jtoUnZNNOJxmbjfMU mcOSNZvxqQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DS records for SECURITYTESTFAN.GOV in the GOV zone
	DS=47449/SHA-256 has algorithm RSASHA256
	DS=53590/SHA-256 has algorithm RSASHA256
	DS=56632/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`SECURITYTESTFAN.GOV. 3600 IN RRSIG ( DS 13 2 3600 20251214090839 20251212070839 35496 gov. eaSeTk6X3CBQSOPvx2epxWmrGJKe/hiQO2u7s9ZHkou+dCf1pnIQW/08c54jtoUnZNNOJxmbjfMU mcOSNZvxqQ== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=47449/SHA-256 is now in the chain-of-trust
	DS=53590/SHA-256 is now in the chain-of-trust
	DS=56632/SHA-256 is now in the chain-of-trust
	`SECURITYTESTFAN.GOV. 3600 IN DS ( 47449 8 2 de18d15fb9797eba80c71d519f94fd929f979c097f8c66f391b7dc73ff5562d8 )`
	`SECURITYTESTFAN.GOV. 3600 IN DS ( 53590 8 2 edc4e3cc56431f51702c67dc329913eb37a05aea4b234dd8815519cf480f75e6 )`
	`SECURITYTESTFAN.GOV. 3600 IN DS ( 56632 8 2 eccdd4fa79f37872b6856d097de389d20e21ab98969866a7073b917ef48833fe )`
	Query to a14-64.akam.net for SECURITYTESTFAN.GOV/DNSKEY
	Received 2349 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 2349 octets ;; HEADER SECTION ;; id = 51645 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) SECURITYTESTFAN.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAcXcl2XwnVSL2+NPk4fbzAD31MeAk6xc59TbyT6JqgDemlakH0+tnHXEpwh4jWUeFz+32XoV c0lIKtg2M5bxWuTdaZet0elMmQxDzgmmyxtSawHGjyER2PiILpYWwYgLuuc+Mxqqef+48z5VKBMd KEJvBi+kdVxYO16YGghQVWTP7puIzqXM6bEXWUCo9JrBz6RtkxUidw9J38Z/boL7NB+VJtP1K589 Va3AyJ31yT2X38yh26jBL4mQEwrIXzwmQG2sng8gijbMS2bqXpUXz1UYALPsdc7J/tisE23GwwmB 5TGyyTbiTo3MfKU97w3AMMNQQAYS5dUYeFOsjziqGBM= ) ; keytag 34968 SECURITYTESTFAN.GOV. 15768000 IN DNSKEY ( 257 3 8 AwEAAdLLalc8Zr58dDRjzF9OVUxUYI1o5fO/g3fwSioTDQEt5xmApTbbISHOFB1sql/lbqQQ1hlW Kc1Zwa9VRXZt8cuC/j5wxQEftYs8v5700T/A/mes5IpLAVQzFCkWW/kpYxun4ynOKgyQ0qphaAln DB5gHCTHfLgI/iP33RLJ54IMJ791PnopPaA/HUWW57ZVjtnsIiwhUyAK2hXgYCnH3xg8y/t8qaRz p+BEKWy8dilbRWRHlb7QrVo8WBgFdZowk3QK7/m5aiIuy/12+bT0HPZd1SSd+yxZ6073ix0Io5ny mCbW0K6VTx3tB27ScpFyNP5W32IN7o82n7HLDTKIwPM= ) ; keytag 47449 SECURITYTESTFAN.GOV. 15768000 IN DNSKEY ( 257 3 8 AwEAAcQRb77Lyprbb3NRiJvdQr102PSn3BsVj5E6disOAih0RBKOuwGhuyrbPoYor0iT3XfeD0rh NU12cqlaVXhrUuXPa6ZJlrE/zKa4O6VHYe9dxTcc+WZ9krZ6bH/LvqYUXhHxdsvua9MBjddf7D7v 76fRWfyQ1FT61nr1d1GWyiIVC4w+2GJC/uZbsL+v+JsgUcPgVzyYqacVbx4HTbUmbpgo4/p9Hm1H JbrgwKLjSllFoTq2i0dNZ5MYlZ6kRvg5RK4Eg9ns7imX0WywOXPVrYqAY2tBtNxLvyD+ezoN4Ca1 joaegzs4ZPn7wJqqrWM2fu3oYKgEXrpq5j9SVXIgvB0= ) ; keytag 53590 SECURITYTESTFAN.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAcCrRQ9FUJgegs041qggtHdGfvb0fdDlLuYfmY+TMg7QjpDRmfVreG1t93sRwDI9GClA65Vv VBWMw3wAOU4BzsU74rBOFPvlCP+BajrA5WDF2Y2YE799AHfjHV88kUdz7GfmDoIv5/cej9inXyJO eWbaEgu3de0P1lkiMuOjMi76D7wkGQiVJWEhTyqnB1Lxj87zbq+uZ+1bDair/iHXDh0EoVOlSocJ 5t36JYRl5vxxwy38GwRE2wzxkLVBJ5xv1XJ/DDbK1bZ/XgTQyt8FF7wJk8L7lBk4s5c+70EcQ7PP tNsalXjducbdHCUbq0eIqAtneNDv5iklysRC5Thav3k= ) ; keytag 24981 SECURITYTESTFAN.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAcczSlNvBKZICbu9eyIV6/pLT1TRfo9zy7I1A8e37ps0Vr2gVVC9pKk2R2f+XXQ5V32ObEoL LCVLotdIvC+rzLnDuQIqmVcBL+BBjmx78rpUBaEJfuKojce4SsYBQzzvEqcMTSgyqOQRztUPOpi+ akSGi/Bid4J6iVl2Sv8nb9mcKvCUk9/bvvlaf5z6Sj73EoG6dk0NhCNoUHLGZfPPG7HEWmN/N8aw EIyu+z9AF7wd3HQ3WeK6ETg1kApTGwCuXXxvOz4yUWWfHoXJ53NCCqyXfIqsiHhzfsYIhzftzG7A TWnVjcrFfWlnjD26VV79gKyou/JSLcPIDrFPKkKEsa8= ) ; keytag 12219 SECURITYTESTFAN.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20261118155926 20251118145926 34968 securitytestfan.gov. AynISd8Kr7R8Kdz+hH1rQ/vnJ+nbs+Lmeoq6zaNsKJ7sUhNNy3miS2YB7TtNeumRgrhFww4pg3TK HToitrorr4wCSWThVl3TorCJqEG0VWrItr9y4nhI6oQt4OTogygxSolhH8jXa0Ha8F+wDXFeLcxt whs6kVBPTotjDWUf+26+lBvj9gsJGen0/oIem5VSn/3LfJL0BnjJpE+9SUqvZAd4h/mVr8LXbTQE j3eVcKPaeh6zN8bazCBm82XqX6PpKo9whuLCZCrbkh9A2Y64jPWRXdGumgBxZolvXJqhqlOCafOo OJDsohpZ0iusndyUW8vj//GwYZSm1sKFOR/gxQ== ) SECURITYTESTFAN.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20261118155926 20251118145926 47449 securitytestfan.gov. BSFeUkg/WpWFbp4dEUXcrsSUrypqIU6s15IOuC0VbrBHoaz29E/qpZKpNmX4lXAr1AIaSonP/q3r U4hRGvX3IuqXkyRH7ElcyDyx3Xd7jiLNaIpqXE24uiN3NgppKuwcylLt0gUoWKSo6a0eHJHw1+L6 YFtVXnENF+faAGt+Tb7VHFcC+HuCzdeTPdNCxgA2eqko0Q+8jcI2RQp0Vvpj7cnq4LvJHZ0hiIN5 vbvoi6AoxTLaxW2P44f9E1ES/CLHzjvzEeTtVaSPfnxQ8k4v8tLf5n6am3bQ9OQOjoC0SNgs+bV9 J5MbC8KAMWV/O4ParSSGhqDXazbAlFRLyEpw3A== ) SECURITYTESTFAN.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20261118155926 20251118145926 53590 securitytestfan.gov. veKUoERUJyOuLQgBSNHJCs7Z2bOh71B/2NCw3HvwEWyBq7xWcrda36cBcLGwBKPAz0NIx7ijHHcn 1gI5jPO/rD/ldFd/RbH5zvP0gwksd1neDW2kn8q8ZjCSenTEocHF3Vv050Lm7mbugSk0eE2fIPLC 7mWMtG9JlpklJmmF3EJbH0FGtWaub7WB61Qq/N2kUhYdfKpNAwH9vDuu8sL/+eQMiy9bZoWDwRmQ Nji/sZ8yexC14BsVXwiI8ZxJc/lMS5H1f52LXmQsD3JghLCjmrJqnNkzvBgZ2p5M+oUIfSRUQdyc xPN9xAG0TqqA5gKk0Ja1Imj+0bOOVFnGlWd8JQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for SECURITYTESTFAN.GOV
	`SECURITYTESTFAN.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAcXcl2XwnVSL2+NPk4fbzAD31MeAk6xc59TbyT6JqgDemlakH0+tnHXEpwh4jWUeFz+32XoV c0lIKtg2M5bxWuTdaZet0elMmQxDzgmmyxtSawHGjyER2PiILpYWwYgLuuc+Mxqqef+48z5VKBMd KEJvBi+kdVxYO16YGghQVWTP7puIzqXM6bEXWUCo9JrBz6RtkxUidw9J38Z/boL7NB+VJtP1K589 Va3AyJ31yT2X38yh26jBL4mQEwrIXzwmQG2sng8gijbMS2bqXpUXz1UYALPsdc7J/tisE23GwwmB 5TGyyTbiTo3MfKU97w3AMMNQQAYS5dUYeFOsjziqGBM= ) ; keytag 34968`
	`SECURITYTESTFAN.GOV. 15768000 IN DNSKEY ( 257 3 8 AwEAAdLLalc8Zr58dDRjzF9OVUxUYI1o5fO/g3fwSioTDQEt5xmApTbbISHOFB1sql/lbqQQ1hlW Kc1Zwa9VRXZt8cuC/j5wxQEftYs8v5700T/A/mes5IpLAVQzFCkWW/kpYxun4ynOKgyQ0qphaAln DB5gHCTHfLgI/iP33RLJ54IMJ791PnopPaA/HUWW57ZVjtnsIiwhUyAK2hXgYCnH3xg8y/t8qaRz p+BEKWy8dilbRWRHlb7QrVo8WBgFdZowk3QK7/m5aiIuy/12+bT0HPZd1SSd+yxZ6073ix0Io5ny mCbW0K6VTx3tB27ScpFyNP5W32IN7o82n7HLDTKIwPM= ) ; keytag 47449`
	`SECURITYTESTFAN.GOV. 15768000 IN DNSKEY ( 257 3 8 AwEAAcQRb77Lyprbb3NRiJvdQr102PSn3BsVj5E6disOAih0RBKOuwGhuyrbPoYor0iT3XfeD0rh NU12cqlaVXhrUuXPa6ZJlrE/zKa4O6VHYe9dxTcc+WZ9krZ6bH/LvqYUXhHxdsvua9MBjddf7D7v 76fRWfyQ1FT61nr1d1GWyiIVC4w+2GJC/uZbsL+v+JsgUcPgVzyYqacVbx4HTbUmbpgo4/p9Hm1H JbrgwKLjSllFoTq2i0dNZ5MYlZ6kRvg5RK4Eg9ns7imX0WywOXPVrYqAY2tBtNxLvyD+ezoN4Ca1 joaegzs4ZPn7wJqqrWM2fu3oYKgEXrpq5j9SVXIgvB0= ) ; keytag 53590`
	`SECURITYTESTFAN.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAcCrRQ9FUJgegs041qggtHdGfvb0fdDlLuYfmY+TMg7QjpDRmfVreG1t93sRwDI9GClA65Vv VBWMw3wAOU4BzsU74rBOFPvlCP+BajrA5WDF2Y2YE799AHfjHV88kUdz7GfmDoIv5/cej9inXyJO eWbaEgu3de0P1lkiMuOjMi76D7wkGQiVJWEhTyqnB1Lxj87zbq+uZ+1bDair/iHXDh0EoVOlSocJ 5t36JYRl5vxxwy38GwRE2wzxkLVBJ5xv1XJ/DDbK1bZ/XgTQyt8FF7wJk8L7lBk4s5c+70EcQ7PP tNsalXjducbdHCUbq0eIqAtneNDv5iklysRC5Thav3k= ) ; keytag 24981`
	`SECURITYTESTFAN.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAcczSlNvBKZICbu9eyIV6/pLT1TRfo9zy7I1A8e37ps0Vr2gVVC9pKk2R2f+XXQ5V32ObEoL LCVLotdIvC+rzLnDuQIqmVcBL+BBjmx78rpUBaEJfuKojce4SsYBQzzvEqcMTSgyqOQRztUPOpi+ akSGi/Bid4J6iVl2Sv8nb9mcKvCUk9/bvvlaf5z6Sj73EoG6dk0NhCNoUHLGZfPPG7HEWmN/N8aw EIyu+z9AF7wd3HQ3WeK6ETg1kApTGwCuXXxvOz4yUWWfHoXJ53NCCqyXfIqsiHhzfsYIhzftzG7A TWnVjcrFfWlnjD26VV79gKyou/JSLcPIDrFPKkKEsa8= ) ; keytag 12219`
	DNSKEY=47449/SEP is now in the chain-of-trust
	DS=47449/SHA-256 verifies DNSKEY=47449/SEP
	DNSKEY=53590/SEP is now in the chain-of-trust
	DS=53590/SHA-256 verifies DNSKEY=53590/SEP
	DS=56632/SHA-256 is published, but a corresponding DNSKEY is not
	Found 3 RRSIGs over DNSKEY RRset
	`SECURITYTESTFAN.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20261118155926 20251118145926 34968 securitytestfan.gov. AynISd8Kr7R8Kdz+hH1rQ/vnJ+nbs+Lmeoq6zaNsKJ7sUhNNy3miS2YB7TtNeumRgrhFww4pg3TK HToitrorr4wCSWThVl3TorCJqEG0VWrItr9y4nhI6oQt4OTogygxSolhH8jXa0Ha8F+wDXFeLcxt whs6kVBPTotjDWUf+26+lBvj9gsJGen0/oIem5VSn/3LfJL0BnjJpE+9SUqvZAd4h/mVr8LXbTQE j3eVcKPaeh6zN8bazCBm82XqX6PpKo9whuLCZCrbkh9A2Y64jPWRXdGumgBxZolvXJqhqlOCafOo OJDsohpZ0iusndyUW8vj//GwYZSm1sKFOR/gxQ== )`
	`SECURITYTESTFAN.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20261118155926 20251118145926 47449 securitytestfan.gov. BSFeUkg/WpWFbp4dEUXcrsSUrypqIU6s15IOuC0VbrBHoaz29E/qpZKpNmX4lXAr1AIaSonP/q3r U4hRGvX3IuqXkyRH7ElcyDyx3Xd7jiLNaIpqXE24uiN3NgppKuwcylLt0gUoWKSo6a0eHJHw1+L6 YFtVXnENF+faAGt+Tb7VHFcC+HuCzdeTPdNCxgA2eqko0Q+8jcI2RQp0Vvpj7cnq4LvJHZ0hiIN5 vbvoi6AoxTLaxW2P44f9E1ES/CLHzjvzEeTtVaSPfnxQ8k4v8tLf5n6am3bQ9OQOjoC0SNgs+bV9 J5MbC8KAMWV/O4ParSSGhqDXazbAlFRLyEpw3A== )`
	`SECURITYTESTFAN.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20261118155926 20251118145926 53590 securitytestfan.gov. veKUoERUJyOuLQgBSNHJCs7Z2bOh71B/2NCw3HvwEWyBq7xWcrda36cBcLGwBKPAz0NIx7ijHHcn 1gI5jPO/rD/ldFd/RbH5zvP0gwksd1neDW2kn8q8ZjCSenTEocHF3Vv050Lm7mbugSk0eE2fIPLC 7mWMtG9JlpklJmmF3EJbH0FGtWaub7WB61Qq/N2kUhYdfKpNAwH9vDuu8sL/+eQMiy9bZoWDwRmQ Nji/sZ8yexC14BsVXwiI8ZxJc/lMS5H1f52LXmQsD3JghLCjmrJqnNkzvBgZ2p5M+oUIfSRUQdyc xPN9xAG0TqqA5gKk0Ja1Imj+0bOOVFnGlWd8JQ== )`
	RRSIG=34968 and DNSKEY=34968 verifies the DNSKEY RRset
	RRSIG=47449 and DNSKEY=47449/SEP verifies the DNSKEY RRset
	RRSIG=53590 and DNSKEY=53590/SEP verifies the DNSKEY RRset
	DNSKEY=34968 is now in the chain-of-trust
	DNSKEY=24981 is now in the chain-of-trust
	DNSKEY=12219 is now in the chain-of-trust
	Query to a3-66.akam.net for SECURITYTESTFAN.GOV/A
	Received 837 bytes from 96.7.49.66
	;; Response received from [96.7.49.66] 837 octets ;; HEADER SECTION ;; id = 59897 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) SECURITYTESTFAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 1509 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== ) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN NSEC3 ( 1 0 10 fb93d1a2980b5fd0c2e57837e437 d6hh1v3m374mm979648mq6606deioi3g NS SOA RRSIG DNSKEY NSEC3PARAM ) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20261118155926 20251118145926 34968 securitytestfan.gov. ZIytP0z/WcNYW6Lg8yXhD3IflucH+PCADinl7uMrcM4jFQelaT/+F/925Y/PeW3xzkytUybxElCQ 43Vjglvm966FHg5NXWrnRlLqh0yVmgvKXg9Q4dgPWrE2WQBqtRwb9pDpy6j9rknwdkruFKCK/eCn b8PVNIZQIhj39Xpuzx9Q+mfn/1wwvjAJNm/vG5VhuAw5iqFiX0bu3I21JmPfyz0J3DVubGCcOcJF RFqNpiQZbJCP6TITsdRXC3hIAbPLlBqdvwjH26TPuiB+ks7PzB3evCphs4PuJQp5Mk0GZXC4e6hT lyC62ZNJDhP/032tkhqTcyOxCFe5pEig+NxhEQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a3-66.akam.net is authoritative for SECURITYTESTFAN.GOV
	Found RRSIG signed by securitytestfan.gov zone
	Query to a14-64.akam.net for SECURITYTESTFAN.GOV/SOA
	Received 873 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 873 octets ;; HEADER SECTION ;; id = 19427 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN SOA ;; ANSWER SECTION (2 records) SECURITYTESTFAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 1509 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== ) ;; AUTHORITY SECTION (7 records) SECURITYTESTFAN.GOV. 900 IN NS a1-63.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a3-66.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a14-64.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a8-67.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a26-65.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a9-64.akam.net. SECURITYTESTFAN.GOV. 900 IN RRSIG ( NS 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. efjNLuvTvVR4BfLcApsN3sX5QJo8gbITS+QmuMr50qSNrmCZ+NuDHtTGk0DWQyX13RaWiNOaRaC6 ZZJ+KzucIW4SVOAHHnXzgkfpxVl6bvxezDARFSrPAcQQhGDq916pMRmyOgPB9QhXpjTzgASQcLRk gMPzOZ/F2/pggZa6Xp4EvsgL8NiZo/pGEGCQA6aejNmk4Ab8G1RKBLjtoPnf/obF1Jw8dVKrwZq/ /kMAt/dozUHMccUlHTgzBctJBwPGIckJ0xJ1cAWnlM/Or2EYBmjcowj/+pfzs1nFDOqCSXhEuRT3 kdQLJLEHeppxxJkkQn9XW88zW1quHXkPeo4geQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a26-65.akam.net for SECURITYTESTFAN.GOV/SOA
	Received 873 bytes from 23.74.25.65
	;; Response received from [23.74.25.65] 873 octets ;; HEADER SECTION ;; id = 21295 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN SOA ;; ANSWER SECTION (2 records) SECURITYTESTFAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 1509 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== ) ;; AUTHORITY SECTION (7 records) SECURITYTESTFAN.GOV. 900 IN NS a26-65.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a14-64.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a9-64.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a3-66.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a8-67.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a1-63.akam.net. SECURITYTESTFAN.GOV. 900 IN RRSIG ( NS 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. efjNLuvTvVR4BfLcApsN3sX5QJo8gbITS+QmuMr50qSNrmCZ+NuDHtTGk0DWQyX13RaWiNOaRaC6 ZZJ+KzucIW4SVOAHHnXzgkfpxVl6bvxezDARFSrPAcQQhGDq916pMRmyOgPB9QhXpjTzgASQcLRk gMPzOZ/F2/pggZa6Xp4EvsgL8NiZo/pGEGCQA6aejNmk4Ab8G1RKBLjtoPnf/obF1Jw8dVKrwZq/ /kMAt/dozUHMccUlHTgzBctJBwPGIckJ0xJ1cAWnlM/Or2EYBmjcowj/+pfzs1nFDOqCSXhEuRT3 kdQLJLEHeppxxJkkQn9XW88zW1quHXkPeo4geQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a8-67.akam.net for SECURITYTESTFAN.GOV/SOA
	Received 873 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 873 octets ;; HEADER SECTION ;; id = 19781 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN SOA ;; ANSWER SECTION (2 records) SECURITYTESTFAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 1509 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== ) ;; AUTHORITY SECTION (7 records) SECURITYTESTFAN.GOV. 900 IN NS a26-65.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a8-67.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a3-66.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a1-63.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a9-64.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a14-64.akam.net. SECURITYTESTFAN.GOV. 900 IN RRSIG ( NS 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. efjNLuvTvVR4BfLcApsN3sX5QJo8gbITS+QmuMr50qSNrmCZ+NuDHtTGk0DWQyX13RaWiNOaRaC6 ZZJ+KzucIW4SVOAHHnXzgkfpxVl6bvxezDARFSrPAcQQhGDq916pMRmyOgPB9QhXpjTzgASQcLRk gMPzOZ/F2/pggZa6Xp4EvsgL8NiZo/pGEGCQA6aejNmk4Ab8G1RKBLjtoPnf/obF1Jw8dVKrwZq/ /kMAt/dozUHMccUlHTgzBctJBwPGIckJ0xJ1cAWnlM/Or2EYBmjcowj/+pfzs1nFDOqCSXhEuRT3 kdQLJLEHeppxxJkkQn9XW88zW1quHXkPeo4geQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-63.akam.net for SECURITYTESTFAN.GOV/SOA
	Received 873 bytes from 193.108.91.63
	;; Response received from [193.108.91.63] 873 octets ;; HEADER SECTION ;; id = 39498 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN SOA ;; ANSWER SECTION (2 records) SECURITYTESTFAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 1509 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== ) ;; AUTHORITY SECTION (7 records) SECURITYTESTFAN.GOV. 900 IN NS a1-63.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a14-64.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a8-67.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a9-64.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a26-65.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a3-66.akam.net. SECURITYTESTFAN.GOV. 900 IN RRSIG ( NS 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. efjNLuvTvVR4BfLcApsN3sX5QJo8gbITS+QmuMr50qSNrmCZ+NuDHtTGk0DWQyX13RaWiNOaRaC6 ZZJ+KzucIW4SVOAHHnXzgkfpxVl6bvxezDARFSrPAcQQhGDq916pMRmyOgPB9QhXpjTzgASQcLRk gMPzOZ/F2/pggZa6Xp4EvsgL8NiZo/pGEGCQA6aejNmk4Ab8G1RKBLjtoPnf/obF1Jw8dVKrwZq/ /kMAt/dozUHMccUlHTgzBctJBwPGIckJ0xJ1cAWnlM/Or2EYBmjcowj/+pfzs1nFDOqCSXhEuRT3 kdQLJLEHeppxxJkkQn9XW88zW1quHXkPeo4geQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a9-64.akam.net for SECURITYTESTFAN.GOV/SOA
	Received 873 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 873 octets ;; HEADER SECTION ;; id = 10657 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN SOA ;; ANSWER SECTION (2 records) SECURITYTESTFAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 1509 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== ) ;; AUTHORITY SECTION (7 records) SECURITYTESTFAN.GOV. 900 IN NS a3-66.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a1-63.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a9-64.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a26-65.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a14-64.akam.net. SECURITYTESTFAN.GOV. 900 IN NS a8-67.akam.net. SECURITYTESTFAN.GOV. 900 IN RRSIG ( NS 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. efjNLuvTvVR4BfLcApsN3sX5QJo8gbITS+QmuMr50qSNrmCZ+NuDHtTGk0DWQyX13RaWiNOaRaC6 ZZJ+KzucIW4SVOAHHnXzgkfpxVl6bvxezDARFSrPAcQQhGDq916pMRmyOgPB9QhXpjTzgASQcLRk gMPzOZ/F2/pggZa6Xp4EvsgL8NiZo/pGEGCQA6aejNmk4Ab8G1RKBLjtoPnf/obF1Jw8dVKrwZq/ /kMAt/dozUHMccUlHTgzBctJBwPGIckJ0xJ1cAWnlM/Or2EYBmjcowj/+pfzs1nFDOqCSXhEuRT3 kdQLJLEHeppxxJkkQn9XW88zW1quHXkPeo4geQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a3-66.akam.net for SECURITYTESTFAN.GOV/A
	Received 837 bytes from 96.7.49.66
	;; Response received from [96.7.49.66] 837 octets ;; HEADER SECTION ;; id = 38381 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) SECURITYTESTFAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 1509 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== ) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN NSEC3 ( 1 0 10 fb93d1a2980b5fd0c2e57837e437 d6hh1v3m374mm979648mq6606deioi3g NS SOA RRSIG DNSKEY NSEC3PARAM ) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20261118155926 20251118145926 34968 securitytestfan.gov. ZIytP0z/WcNYW6Lg8yXhD3IflucH+PCADinl7uMrcM4jFQelaT/+F/925Y/PeW3xzkytUybxElCQ 43Vjglvm966FHg5NXWrnRlLqh0yVmgvKXg9Q4dgPWrE2WQBqtRwb9pDpy6j9rknwdkruFKCK/eCn b8PVNIZQIhj39Xpuzx9Q+mfn/1wwvjAJNm/vG5VhuAw5iqFiX0bu3I21JmPfyz0J3DVubGCcOcJF RFqNpiQZbJCP6TITsdRXC3hIAbPLlBqdvwjH26TPuiB+ks7PzB3evCphs4PuJQp5Mk0GZXC4e6hT lyC62ZNJDhP/032tkhqTcyOxCFe5pEig+NxhEQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== )`
	RRSIG=34968 and DNSKEY=34968 verifies the SOA RRset

SECURITYTESTFAN.GOV

	Query to a9-64.akam.net for SECURITYTESTFAN.GOV/A
	Received 837 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 837 octets ;; HEADER SECTION ;; id = 45836 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) SECURITYTESTFAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 1509 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== ) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN NSEC3 ( 1 0 10 fb93d1a2980b5fd0c2e57837e437 d6hh1v3m374mm979648mq6606deioi3g NS SOA RRSIG DNSKEY NSEC3PARAM ) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20261118155926 20251118145926 34968 securitytestfan.gov. ZIytP0z/WcNYW6Lg8yXhD3IflucH+PCADinl7uMrcM4jFQelaT/+F/925Y/PeW3xzkytUybxElCQ 43Vjglvm966FHg5NXWrnRlLqh0yVmgvKXg9Q4dgPWrE2WQBqtRwb9pDpy6j9rknwdkruFKCK/eCn b8PVNIZQIhj39Xpuzx9Q+mfn/1wwvjAJNm/vG5VhuAw5iqFiX0bu3I21JmPfyz0J3DVubGCcOcJF RFqNpiQZbJCP6TITsdRXC3hIAbPLlBqdvwjH26TPuiB+ks7PzB3evCphs4PuJQp5Mk0GZXC4e6hT lyC62ZNJDhP/032tkhqTcyOxCFe5pEig+NxhEQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a9-64.akam.net is authoritative for SECURITYTESTFAN.GOV
	Found RRSIG signed by securitytestfan.gov zone
	Query to a9-64.akam.net for SECURITYTESTFAN.GOV/A
	Received 837 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 837 octets ;; HEADER SECTION ;; id = 8710 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN NSEC3 ( 1 0 10 fb93d1a2980b5fd0c2e57837e437 d6hh1v3m374mm979648mq6606deioi3g NS SOA RRSIG DNSKEY NSEC3PARAM ) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20261118155926 20251118145926 34968 securitytestfan.gov. ZIytP0z/WcNYW6Lg8yXhD3IflucH+PCADinl7uMrcM4jFQelaT/+F/925Y/PeW3xzkytUybxElCQ 43Vjglvm966FHg5NXWrnRlLqh0yVmgvKXg9Q4dgPWrE2WQBqtRwb9pDpy6j9rknwdkruFKCK/eCn b8PVNIZQIhj39Xpuzx9Q+mfn/1wwvjAJNm/vG5VhuAw5iqFiX0bu3I21JmPfyz0J3DVubGCcOcJF RFqNpiQZbJCP6TITsdRXC3hIAbPLlBqdvwjH26TPuiB+ks7PzB3evCphs4PuJQp5Mk0GZXC4e6hT lyC62ZNJDhP/032tkhqTcyOxCFe5pEig+NxhEQ== ) SECURITYTESTFAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 1509 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== )`
	RRSIG=34968 and DNSKEY=34968 verifies the SOA RRset

SECURITYTESTFAN.GOV

	Query to a26-65.akam.net for SECURITYTESTFAN.GOV/A
	Received 837 bytes from 23.74.25.65
	;; Response received from [23.74.25.65] 837 octets ;; HEADER SECTION ;; id = 35304 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN NSEC3 ( 1 0 10 fb93d1a2980b5fd0c2e57837e437 d6hh1v3m374mm979648mq6606deioi3g NS SOA RRSIG DNSKEY NSEC3PARAM ) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20261118155926 20251118145926 34968 securitytestfan.gov. ZIytP0z/WcNYW6Lg8yXhD3IflucH+PCADinl7uMrcM4jFQelaT/+F/925Y/PeW3xzkytUybxElCQ 43Vjglvm966FHg5NXWrnRlLqh0yVmgvKXg9Q4dgPWrE2WQBqtRwb9pDpy6j9rknwdkruFKCK/eCn b8PVNIZQIhj39Xpuzx9Q+mfn/1wwvjAJNm/vG5VhuAw5iqFiX0bu3I21JmPfyz0J3DVubGCcOcJF RFqNpiQZbJCP6TITsdRXC3hIAbPLlBqdvwjH26TPuiB+ks7PzB3evCphs4PuJQp5Mk0GZXC4e6hT lyC62ZNJDhP/032tkhqTcyOxCFe5pEig+NxhEQ== ) SECURITYTESTFAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 1509 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a26-65.akam.net is authoritative for SECURITYTESTFAN.GOV
	Found RRSIG signed by securitytestfan.gov zone
	Query to a26-65.akam.net for SECURITYTESTFAN.GOV/A
	Received 837 bytes from 23.74.25.65
	;; Response received from [23.74.25.65] 837 octets ;; HEADER SECTION ;; id = 14783 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN NSEC3 ( 1 0 10 fb93d1a2980b5fd0c2e57837e437 d6hh1v3m374mm979648mq6606deioi3g NS SOA RRSIG DNSKEY NSEC3PARAM ) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20261118155926 20251118145926 34968 securitytestfan.gov. ZIytP0z/WcNYW6Lg8yXhD3IflucH+PCADinl7uMrcM4jFQelaT/+F/925Y/PeW3xzkytUybxElCQ 43Vjglvm966FHg5NXWrnRlLqh0yVmgvKXg9Q4dgPWrE2WQBqtRwb9pDpy6j9rknwdkruFKCK/eCn b8PVNIZQIhj39Xpuzx9Q+mfn/1wwvjAJNm/vG5VhuAw5iqFiX0bu3I21JmPfyz0J3DVubGCcOcJF RFqNpiQZbJCP6TITsdRXC3hIAbPLlBqdvwjH26TPuiB+ks7PzB3evCphs4PuJQp5Mk0GZXC4e6hT lyC62ZNJDhP/032tkhqTcyOxCFe5pEig+NxhEQ== ) SECURITYTESTFAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 1509 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== )`
	RRSIG=34968 and DNSKEY=34968 verifies the SOA RRset

SECURITYTESTFAN.GOV

	Query to a1-63.akam.net for SECURITYTESTFAN.GOV/A
	Received 837 bytes from 193.108.91.63
	;; Response received from [193.108.91.63] 837 octets ;; HEADER SECTION ;; id = 42805 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN NSEC3 ( 1 0 10 fb93d1a2980b5fd0c2e57837e437 d6hh1v3m374mm979648mq6606deioi3g NS SOA RRSIG DNSKEY NSEC3PARAM ) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20261118155926 20251118145926 34968 securitytestfan.gov. ZIytP0z/WcNYW6Lg8yXhD3IflucH+PCADinl7uMrcM4jFQelaT/+F/925Y/PeW3xzkytUybxElCQ 43Vjglvm966FHg5NXWrnRlLqh0yVmgvKXg9Q4dgPWrE2WQBqtRwb9pDpy6j9rknwdkruFKCK/eCn b8PVNIZQIhj39Xpuzx9Q+mfn/1wwvjAJNm/vG5VhuAw5iqFiX0bu3I21JmPfyz0J3DVubGCcOcJF RFqNpiQZbJCP6TITsdRXC3hIAbPLlBqdvwjH26TPuiB+ks7PzB3evCphs4PuJQp5Mk0GZXC4e6hT lyC62ZNJDhP/032tkhqTcyOxCFe5pEig+NxhEQ== ) SECURITYTESTFAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 1509 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-63.akam.net is authoritative for SECURITYTESTFAN.GOV
	Found RRSIG signed by securitytestfan.gov zone
	Query to a1-63.akam.net for SECURITYTESTFAN.GOV/A
	Received 837 bytes from 193.108.91.63
	;; Response received from [193.108.91.63] 837 octets ;; HEADER SECTION ;; id = 28632 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN NSEC3 ( 1 0 10 fb93d1a2980b5fd0c2e57837e437 d6hh1v3m374mm979648mq6606deioi3g NS SOA RRSIG DNSKEY NSEC3PARAM ) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20261118155926 20251118145926 34968 securitytestfan.gov. ZIytP0z/WcNYW6Lg8yXhD3IflucH+PCADinl7uMrcM4jFQelaT/+F/925Y/PeW3xzkytUybxElCQ 43Vjglvm966FHg5NXWrnRlLqh0yVmgvKXg9Q4dgPWrE2WQBqtRwb9pDpy6j9rknwdkruFKCK/eCn b8PVNIZQIhj39Xpuzx9Q+mfn/1wwvjAJNm/vG5VhuAw5iqFiX0bu3I21JmPfyz0J3DVubGCcOcJF RFqNpiQZbJCP6TITsdRXC3hIAbPLlBqdvwjH26TPuiB+ks7PzB3evCphs4PuJQp5Mk0GZXC4e6hT lyC62ZNJDhP/032tkhqTcyOxCFe5pEig+NxhEQ== ) SECURITYTESTFAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 1509 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== )`
	RRSIG=34968 and DNSKEY=34968 verifies the SOA RRset

SECURITYTESTFAN.GOV

	Query to a14-64.akam.net for SECURITYTESTFAN.GOV/A
	Received 837 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 837 octets ;; HEADER SECTION ;; id = 51619 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN NSEC3 ( 1 0 10 fb93d1a2980b5fd0c2e57837e437 d6hh1v3m374mm979648mq6606deioi3g NS SOA RRSIG DNSKEY NSEC3PARAM ) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20261118155926 20251118145926 34968 securitytestfan.gov. ZIytP0z/WcNYW6Lg8yXhD3IflucH+PCADinl7uMrcM4jFQelaT/+F/925Y/PeW3xzkytUybxElCQ 43Vjglvm966FHg5NXWrnRlLqh0yVmgvKXg9Q4dgPWrE2WQBqtRwb9pDpy6j9rknwdkruFKCK/eCn b8PVNIZQIhj39Xpuzx9Q+mfn/1wwvjAJNm/vG5VhuAw5iqFiX0bu3I21JmPfyz0J3DVubGCcOcJF RFqNpiQZbJCP6TITsdRXC3hIAbPLlBqdvwjH26TPuiB+ks7PzB3evCphs4PuJQp5Mk0GZXC4e6hT lyC62ZNJDhP/032tkhqTcyOxCFe5pEig+NxhEQ== ) SECURITYTESTFAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 1509 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a14-64.akam.net is authoritative for SECURITYTESTFAN.GOV
	Found RRSIG signed by securitytestfan.gov zone
	Query to a14-64.akam.net for SECURITYTESTFAN.GOV/A
	Received 837 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 837 octets ;; HEADER SECTION ;; id = 18380 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) SECURITYTESTFAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 1509 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== ) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN NSEC3 ( 1 0 10 fb93d1a2980b5fd0c2e57837e437 d6hh1v3m374mm979648mq6606deioi3g NS SOA RRSIG DNSKEY NSEC3PARAM ) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20261118155926 20251118145926 34968 securitytestfan.gov. ZIytP0z/WcNYW6Lg8yXhD3IflucH+PCADinl7uMrcM4jFQelaT/+F/925Y/PeW3xzkytUybxElCQ 43Vjglvm966FHg5NXWrnRlLqh0yVmgvKXg9Q4dgPWrE2WQBqtRwb9pDpy6j9rknwdkruFKCK/eCn b8PVNIZQIhj39Xpuzx9Q+mfn/1wwvjAJNm/vG5VhuAw5iqFiX0bu3I21JmPfyz0J3DVubGCcOcJF RFqNpiQZbJCP6TITsdRXC3hIAbPLlBqdvwjH26TPuiB+ks7PzB3evCphs4PuJQp5Mk0GZXC4e6hT lyC62ZNJDhP/032tkhqTcyOxCFe5pEig+NxhEQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== )`
	RRSIG=34968 and DNSKEY=34968 verifies the SOA RRset

SECURITYTESTFAN.GOV

	Query to a8-67.akam.net for SECURITYTESTFAN.GOV/A
	Received 837 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 837 octets ;; HEADER SECTION ;; id = 55704 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN NSEC3 ( 1 0 10 fb93d1a2980b5fd0c2e57837e437 d6hh1v3m374mm979648mq6606deioi3g NS SOA RRSIG DNSKEY NSEC3PARAM ) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20261118155926 20251118145926 34968 securitytestfan.gov. ZIytP0z/WcNYW6Lg8yXhD3IflucH+PCADinl7uMrcM4jFQelaT/+F/925Y/PeW3xzkytUybxElCQ 43Vjglvm966FHg5NXWrnRlLqh0yVmgvKXg9Q4dgPWrE2WQBqtRwb9pDpy6j9rknwdkruFKCK/eCn b8PVNIZQIhj39Xpuzx9Q+mfn/1wwvjAJNm/vG5VhuAw5iqFiX0bu3I21JmPfyz0J3DVubGCcOcJF RFqNpiQZbJCP6TITsdRXC3hIAbPLlBqdvwjH26TPuiB+ks7PzB3evCphs4PuJQp5Mk0GZXC4e6hT lyC62ZNJDhP/032tkhqTcyOxCFe5pEig+NxhEQ== ) SECURITYTESTFAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 1509 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a8-67.akam.net is authoritative for SECURITYTESTFAN.GOV
	Found RRSIG signed by securitytestfan.gov zone
	Query to a8-67.akam.net for SECURITYTESTFAN.GOV/A
	Received 837 bytes from 2.16.40.67
	;; Response received from [2.16.40.67] 837 octets ;; HEADER SECTION ;; id = 44171 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; SECURITYTESTFAN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN NSEC3 ( 1 0 10 fb93d1a2980b5fd0c2e57837e437 d6hh1v3m374mm979648mq6606deioi3g NS SOA RRSIG DNSKEY NSEC3PARAM ) obj3f9mr93uohhqbr1rngophtdl7rmui.SECURITYTESTFAN.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20261118155926 20251118145926 34968 securitytestfan.gov. ZIytP0z/WcNYW6Lg8yXhD3IflucH+PCADinl7uMrcM4jFQelaT/+F/925Y/PeW3xzkytUybxElCQ 43Vjglvm966FHg5NXWrnRlLqh0yVmgvKXg9Q4dgPWrE2WQBqtRwb9pDpy6j9rknwdkruFKCK/eCn b8PVNIZQIhj39Xpuzx9Q+mfn/1wwvjAJNm/vG5VhuAw5iqFiX0bu3I21JmPfyz0J3DVubGCcOcJF RFqNpiQZbJCP6TITsdRXC3hIAbPLlBqdvwjH26TPuiB+ks7PzB3evCphs4PuJQp5Mk0GZXC4e6hT lyC62ZNJDhP/032tkhqTcyOxCFe5pEig+NxhEQ== ) SECURITYTESTFAN.GOV. 900 IN SOA ( o-bimc-dns001.grid.state.sbu. hostmaster.state.GOV. 1509 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`SECURITYTESTFAN.GOV. 900 IN RRSIG ( SOA 8 2 900 20261118155926 20251118145926 34968 securitytestfan.gov. jEumuYoa2Fr6NvwPwyUDrJo7SAt7fukXkrNtwarRybiZyjc0c7fOlSo2Jr+XUUl5q3kcl6uEUs0X pSGtJEp0nuJFDxV6cyjJYfh8/7TcJyjN38b3CBTjBISuPNz2Y2rnaXoi1wloCGg/nJONiqOf8xQ/ xRbZYxxiaBRYj3nJjsDc1HNhHavYlKomNL37kZnBPmkKhu3ST26tn2hkz7VP2jed+YjtGBbZnIV/ I2x6/QC1mRqO5gVv5BfqSbJkpuJ+uVUCmvQ32dVb97SczrlJSztJNoDJSJICmkHY6rT/uDfFA9vh M9l2mj8ElOx3c3QrD7asNJsa+4SMdSrSqKTUPQ== )`
	RRSIG=34968 and DNSKEY=34968 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test SECURITYTESTFAN.GOV at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: